add validation to refs and repo names. also prevent path traversal

Diffstat

3 files changed, 120 insertions(+), 10 deletions(-)